The short version
- Converters and formatters (CSV, JSON, Markdown, images, PDFs) run in your browser. What you paste or upload stays on your device.
- AI features send the text you submit to a model provider to produce a result. We don't store that text.
- Google Analytics, Microsoft Clarity, and Google AdSense only set cookies after you allow them. You can change your mind any time.
- If you email us, use the contact form, rate a tool, or join the newsletter, we receive what you send plus your IP address.
- We don't sell your personal information.
What we collect and why
Browser-based tools
Tools like Text to CSV, CSV to JSON, the JSON Formatter, and the Image Converter process your data with JavaScript on your own device. The files and text you use with them are never sent to us.
AI features
These features send the text you submit to our server, which forwards it to a model provider and returns the result:
- Humanize AI Text
- The Prompt Optimizer and prompt generator
- AI Smart Parse in Text to CSV
Requests go through OpenRouter, an AI gateway, to the model provider (currently Google's Gemini models). We don't save your input or the output. OpenRouter and the model provider handle requests under their own terms and privacy policies, which may include keeping request logs. Please don't submit passwords, financial details, health information, or confidential documents to these features.
Contact form, tool feedback, newsletter, and free downloads
When you send us something, it arrives as an email in our inbox, delivered by Resend. That includes:
- Contact form: your name, email address, subject, message, and IP address.
- Tool feedback: the tool, your rating, the reason you picked, any comment, and your IP address.
- Newsletter and Scout waitlist: your email address, where you signed up, and your IP address. We send a welcome email and then the newsletter.
- Free downloads, such as the AI writing tells cheat sheet: your email address, which download you asked for, where you signed up, and your IP address. We email you the download link, and you join the newsletter.
We use this to reply, fix problems you report, and send the newsletter you asked for. Newsletter and download sign-ups are also saved as a contact in Resend, which is how we keep the mailing list, and may be checked by Cloudflare Turnstile to block spam bots. To unsubscribe, use the link in any email or write to contact@dervity.com.
Analytics, with your consent
If you allow analytics cookies:
- Google Analytics records pages visited, time on page, how you arrived, your approximate location (country or region), and device and browser type. Google Analytics 4 doesn't log or store IP addresses.
- Microsoft Clarity records how pages are used, including clicks, scrolling, and mouse movement, so we can see where pages confuse people or break.
- We remember the campaign link (UTM tags) that first brought you here, for up to 90 days.
If you decline, Google Analytics runs in consent mode and may send Google basic signals without cookies or identifiers, which Google uses for aggregate reporting.
Analytics without cookies
Vercel Web Analytics counts page views and tool usage (for example, that a conversion ran) without cookies and without identifying you. If you've allowed analytics, these events include the campaign tags that brought you here.
Advertising, with your consent
If you allow advertising cookies, Google AdSense shows ads and measures them. Ads are only personalized to your interests if you also allow personalized ads. You can manage how Google uses your data in Google's ad settings, and Google explains its practices in its partner sites policy.
Hosting and security
Dervity is hosted on Vercel, which keeps standard server logs (such as IP address, browser type, and the page requested) for security and performance. To stop abuse, our server keeps your IP address in memory for about a minute to count requests against rate limits.
What we don't collect
- Files or text you use with the browser-based tools, or their results
- Account details or passwords, since there are no accounts
- Payment information, since the tools are free
Who processes your data
We use these providers to run the site. Each only receives what it needs for its job:
- Vercel: hosting, server logs, and cookie-free web analytics
- Resend: delivering contact, feedback, and newsletter emails
- OpenRouter and Google: running the AI features
- Cloudflare: spam protection on newsletter sign-ups
- Google: Analytics and AdSense, only with your consent
- Microsoft: Clarity, only with your consent
We don't sell or rent your personal information. We would only disclose it if the law required us to.
Legal basis
Under the GDPR and UK GDPR, we rely on:
- Consent: analytics and advertising cookies, and the newsletter. You can withdraw consent at any time.
- Legitimate interests: security, rate limiting, server logs, and cookie-free usage counts that keep the site working.
- Taking steps at your request: replying when you contact us, and running an AI feature when you ask it to.
How long we keep it
- Contact messages, feedback, and newsletter sign-ups: until you ask us to delete them, and no longer than 3 years.
- Google Analytics data: up to 14 months, the longest Google Analytics keeps event data for standard properties.
- Your cookie choice: 12 months in your browser, after which we ask again.
- AI feature input and output: not stored by us.
International transfers
Several of our providers are based in the United States. Where your data leaves the UK or EEA, it's protected by the European Commission's Standard Contractual Clauses, the EU-US Data Privacy Framework, or another safeguard recognized under the GDPR.
Your rights
Depending on where you live, you can ask us to:
- Give you a copy of the personal data we hold about you
- Correct it if it's wrong
- Delete it
- Restrict or object to how we use it
- Send it to you or another service in a portable format
- Stop using it for anything you consented to
Email privacy@dervity.com and we'll respond within one month. You can also complain to your local data protection authority, such as the ICO in the UK or the supervisory authority in your EU country.
Children
Dervity isn't aimed at children under 16, and we don't knowingly collect their personal data. If you think a child has sent us personal information, email privacy@dervity.com and we'll delete it.
Changes and contact
When we change this policy, we update the date at the top of this page. For significant changes, we'll also say so on the site.
Privacy questions: privacy@dervity.com
Everything else: contact@dervity.com or the contact form
The full list of cookies and browser storage is in our Cookie Policy.